month report
January 2015
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
January 2015 closed with 737 published CVEs. 51 criticals, oracle led volume, mostly via fusion middleware. Biggest breakout: novell at ×5.5 their 12-month median. Top weakness class — CWE-79 (134 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
737
— MoM— YoY
Severity mix
51 / 141
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
7.3%
54 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
4070.4
n=54
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
2684
n=4
Weakness × Vendor
What's spreading where in January 2015
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — January 2015
No CVE mentions in the news this month yet.
Breakout vendors
CVE count ≥3× their own 12-period median.
- 5.5×novell11 CVE
- 4.8×fedoraproject19 CVE
- 4.7×openssl7 CVE
- 3.6×mediawiki9 CVE
- 3.5×mantisbt7 CVE
- 3.5×dlink7 CVE
- 3.0×apple50 CVE
- 3.0×schneider-electric3 CVE
- 3.0×php group3 CVE
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #25vdgsecurity7 CVE
- #26chromium6 CVE
- #30ао «ивк»6 CVE
- #38ferretcms project4 CVE
- #41maianscriptworld4 CVE
- #44phpjabbers4 CVE
- #45pixabay4 CVE
- #46basic-cms3 CVE
- #47cherry-design3 CVE
- #51icu project3 CVE
Top vendors
Ranked by distinct CVE count this period.
- 126 CVE8 critCVSS 5.4PoC 4fusion middleware (20) · jdk (18) · jre (18)
- 50 CVE14 critCVSS 7.4×3.0PoC 5mac os x (41) · iphone os (20) · tvos (16)
- 46 CVE3 critCVSS 5.3Nuclei 1PoC 3opensuse (46) · evergreen (2)
- 39 CVE3 critCVSS 5.6PoC 6ubuntu linux (35) · ubuntu (4)
- 38 CVE5 critCVSS 4.8PoC 4enterprise linux (10) · enterprise linux desktop (10) · enterprise linux server (10)
- 34 CVECVSS 6.6chrome (34) · google chrome (3) · v8 (1)
- 33 CVE4 critCVSS 5.4PoC 5debian linux (31) · dpkg (1) · mime-support (1)
- 25 CVE1 critCVSS 5.6PoC 1webex meetings server (7) · secure access control system (3) · unified communications domain manager (3)
- 19 CVECVSS 4.9×4.8PoC 2fedora (19)
- 19 CVE2 critCVSS 5.2PoC 2tririga application platform (3) · sas raid module firmware (2) · sas connectivity module firmware (2)
- 14 CVECVSS 5.0sunos (14)
- 13 CVE10 critCVSS 9.3KEV 2PoC 1flash player (12) · adobe air sdk and compiler (9) · adobe air (9)
- 12 CVE1 critCVSS 3.7KEV 1linux enterprise workstation extension (9) · linux enterprise desktop (9) · linux enterprise server (8)
- 11 CVE4 critCVSS 7.3×5.5suse linux enterprise desktop (10) · suse linux enterprise server (7)
- 10 CVECVSS 6.6PoC 1firefox (10) · seamonkey (9) · firefox esr (4)
- 9 CVECVSS 5.0PoC 7documentum wdk (5) · vipr srm (4) · watch4net (4)
- 9 CVECVSS 4.4×3.6PoC 2mediawiki (9)
- 9 CVE2 critCVSS 7.3KEV 2PoC 2windows server 2012 (8) · windows 8 (7) · windows 8.1 (7)
- 7 CVE1 critCVSS 5.6PoC 4symantec critical system protection (5) · rabbitmq server (2)
- 7 CVECVSS 5.8×3.5KEV 1PoC 7dap-1360 firmware (4) · dcs-2103 firmware (1) · dir-600 (1)
- 7 CVECVSS 4.8×3.5PoC 2mantisbt (7)
- 7 CVECVSS 4.4mariadb (7)
- 7 CVECVSS 4.9×4.7openssl (7)
- 7 CVECVSS 5.0PoC 3django (4) · glance (2) · pillow (1)
- 7 CVECVSS 5.4NEWPoC 7vdg sense (7)
- 6 CVECVSS 6.1NEWchromium (6)
- 6 CVE1 critCVSS 7.1PoC 1sap kernel (2) · hana extended application services (1) · enterprise resource planning (1)
- 6 CVECVSS 4.9simatic wincc sm\@rtclient (3) · scalance x-300 series firmware (2) · scalance x-408 firmware (2)
- 6 CVECVSS 5.0wireshark (6)
- 6 CVECVSS 5.0NEWальт линукс спт (6)
- 5 CVECVSS 4.9cloudstack (1) · poi (1) · santuario xml security for java (1)
- 5 CVECVSS 4.6fastflick (2) · painter (1) · corelcad (1)
- 5 CVECVSS 7.5ffmpeg (5)
- 5 CVECVSS 6.6junos (5)
- 5 CVE1 critCVSS 6.0PoC 4data center security (5)
- 5 CVECVSS 7.4PoC 3debian gnu/linux (4) · xdg-utils (1)
- 4 CVECVSS 4.8PoC 2django (4)
- 4 CVECVSS 6.5NEWPoC 2ferretcms (4)
- 4 CVE1 critCVSS 6.7PoC 4patch (1) · binutils (1) · coreutils (1)
- 4 CVECVSS 4.7linux kernel (4)
- 4 CVECVSS 5.9NEWPoC 3maian uploader (3) · maian weblog (1)
- 4 CVECVSS 5.0PoC 1image registry and delivery service \(glance\) (3) · neutron (1)
- 4 CVE1 critCVSS 8.0PoC 3php (4)
- 4 CVECVSS 6.5NEWPoC 4appointment scheduler (2) · event booking calendar (2)
- 4 CVECVSS 5.2NEWNuclei 4PoC 4pixabay images (4)
- 3 CVECVSS 5.4NEWPoC 2sweetrice (3)
- 3 CVECVSS 5.4NEWPoC 2wikipad (3)
- 3 CVECVSS 5.1PoC 3e107 (3)
- 3 CVE1 critCVSS 7.4multilink ml1600 (2) · multilink ml1600 firmware (2) · multilink ml2400 (2)
- 3 CVECVSS 7.0gcab (1) · gtk (1) · vala (1)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | oracle | 126 | 8 | · | · | PoC 4 | fusion middleware (20) · jdk (18) · jre (18) | — | |
| 2 | apple | 50 | 14 | · | · | ×3.0PoC 5 | mac os x (41) · iphone os (20) · tvos (16) | — | |
| 3 | opensuse | 46 | 3 | · | 1 | Nuclei 1PoC 3 | opensuse (46) · evergreen (2) | — | |
| 4 | canonical | 39 | 3 | · | · | PoC 6 | ubuntu linux (35) · ubuntu (4) | — | |
| 5 | redhat | 38 | 5 | · | · | PoC 4 | enterprise linux (10) · enterprise linux desktop (10) · enterprise linux server (10) | — | |
| 6 | 34 | · | · | · | chrome (34) · google chrome (3) · v8 (1) | — | |||
| 7 | debian | 33 | 4 | · | · | PoC 5 | debian linux (31) · dpkg (1) · mime-support (1) | — | |
| 8 | cisco | 25 | 1 | · | · | PoC 1 | webex meetings server (7) · secure access control system (3) · unified communications domain manager (3) | — | |
| 9 | fedoraproject | 19 | · | · | · | ×4.8PoC 2 | fedora (19) | — | |
| 10 | ibm | 19 | 2 | · | · | PoC 2 | tririga application platform (3) · sas raid module firmware (2) · sas connectivity module firmware (2) | — | |
| 11 | sun | 14 | · | · | · | sunos (14) | — | ||
| 12 | adobe | 13 | 10 | 2 | · | KEV 2PoC 1 | flash player (12) · adobe air sdk and compiler (9) · adobe air (9) | — | |
| 13 | suse | 12 | 1 | 1 | · | KEV 1 | linux enterprise workstation extension (9) · linux enterprise desktop (9) · linux enterprise server (8) | — | |
| 14 | novell | 11 | 4 | · | · | ×5.5 | suse linux enterprise desktop (10) · suse linux enterprise server (7) | — | |
| 15 | mozilla | 10 | · | · | · | PoC 1 | firefox (10) · seamonkey (9) · firefox esr (4) | — | |
| 16 | emc | 9 | · | · | · | PoC 7 | documentum wdk (5) · vipr srm (4) · watch4net (4) | — | |
| 17 | mediawiki | 9 | · | · | · | ×3.6PoC 2 | mediawiki (9) | — | |
| 18 | microsoft | 9 | 2 | 2 | · | KEV 2PoC 2 | windows server 2012 (8) · windows 8 (7) · windows 8.1 (7) | — | |
| 19 | broadcom | 7 | 1 | · | · | PoC 4 | symantec critical system protection (5) · rabbitmq server (2) | — | |
| 20 | dlink | 7 | · | 1 | · | ×3.5KEV 1PoC 7 | dap-1360 firmware (4) · dcs-2103 firmware (1) · dir-600 (1) | — | |
| 21 | mantisbt | 7 | · | · | · | ×3.5PoC 2 | mantisbt (7) | — | |
| 22 | mariadb | 7 | · | · | · | mariadb (7) | — | ||
| 23 | openssl | 7 | · | · | · | ×4.7 | openssl (7) | — | |
| 24 | pypi | 7 | · | · | · | PoC 3 | django (4) · glance (2) · pillow (1) | — | |
| 25 | vdgsecurity | 7 | · | · | · | NEWPoC 7 | vdg sense (7) | — | |
| 26 | chromium | 6 | · | · | · | NEW | chromium (6) | — | |
| 27 | sap | 6 | 1 | · | · | PoC 1 | sap kernel (2) · hana extended application services (1) · enterprise resource planning (1) | — | |
| 28 | siemens | 6 | · | · | · | simatic wincc sm\@rtclient (3) · scalance x-300 series firmware (2) · scalance x-408 firmware (2) | — | ||
| 29 | wireshark | 6 | · | · | · | wireshark (6) | — | ||
| 30 | ао «ивк» | 6 | · | · | · | NEW | альт линукс спт (6) | — | |
| 31 | apache | 5 | · | · | · | cloudstack (1) · poi (1) · santuario xml security for java (1) | — | ||
| 32 | corel | 5 | · | · | · | fastflick (2) · painter (1) · corelcad (1) | — | ||
| 33 | ffmpeg | 5 | · | · | · | ffmpeg (5) | — | ||
| 34 | juniper | 5 | · | · | · | junos (5) | — | ||
| 35 | symantec | 5 | 1 | · | · | PoC 4 | data center security (5) | — | |
| 36 | сообщество свободного программного обеспечения | 5 | · | · | · | PoC 3 | debian gnu/linux (4) · xdg-utils (1) | — | |
| 37 | djangoproject | 4 | · | · | · | PoC 2 | django (4) | — | |
| 38 | ferretcms project | 4 | · | · | · | NEWPoC 2 | ferretcms (4) | — | |
| 39 | gnu | 4 | 1 | · | · | PoC 4 | patch (1) · binutils (1) · coreutils (1) | — | |
| 40 | linux | 4 | · | · | · | linux kernel (4) | — | ||
| 41 | maianscriptworld | 4 | · | · | · | NEWPoC 3 | maian uploader (3) · maian weblog (1) | — | |
| 42 | openstack | 4 | · | · | · | PoC 1 | image registry and delivery service \(glance\) (3) · neutron (1) | — | |
| 43 | php | 4 | 1 | · | · | PoC 3 | php (4) | — | |
| 44 | phpjabbers | 4 | · | · | · | NEWPoC 4 | appointment scheduler (2) · event booking calendar (2) | — | |
| 45 | pixabay | 4 | · | · | 4 | NEWNuclei 4PoC 4 | pixabay images (4) | — | |
| 46 | basic-cms | 3 | · | · | · | NEWPoC 2 | sweetrice (3) | — | |
| 47 | cherry-design | 3 | · | · | · | NEWPoC 2 | wikipad (3) | — | |
| 48 | e107 | 3 | · | · | · | PoC 3 | e107 (3) | — | |
| 49 | ge | 3 | 1 | · | · | multilink ml1600 (2) · multilink ml1600 firmware (2) · multilink ml2400 (2) | — | ||
| 50 | gnome | 3 | · | · | · | gcab (1) · gtk (1) · vala (1) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems135 CVE40 crit21 KEV25 vendorsCVSS 7.3opensuse (46) · ubuntu linux (35) · debian linux (31)
- Databases128 CVE24 crit5 vendorsCVSS 5.4fusion middleware (20) · jdk (18) · jre (18)
- Web & CMS Plugins117 CVE2 crit72 vendorsCVSS 7.5mediawiki (9) · ferretcms (4) · adaptcms (3)
- Mobile Apps85 CVE26 crit5 vendorsCVSS 9.0mac os x (41) · iphone os (20) · tvos (16)
- Enterprise Software61 CVE6 crit22 vendorsCVSS 7.2mantisbt (7) · tririga application platform (3) · business process manager (2)
- OSS Libraries60 CVE2 crit25 vendorsCVSS 6.5openssl (7) · php (7) · international components for unicode (6)
- Consumer Software54 CVE43 crit4 KEV18 vendorsCVSS 8.5flash player (19) · adobe air (9) · adobe air sdk (9)
- 1 crit2 KEV13 vendorsCVSS 6.0webex meetings server (7) · junos (5) · dap-1360 firmware (4)
- Security Products26 CVE1 crit8 vendorsCVSS 7.5documentum wdk (5) · vipr srm (4) · watch4net (4)
- Cloud & SaaS23 CVE1 crit9 vendorsCVSS 5.6symantec critical system protection (5) · player (3) · workstation (3)
- ICS / OT / IoT11 CVE34 crit11 vendorsCVSS 8.0etg3000 factorycast hmi gateway (2) · etg3000 factorycast hmi gateway firmware (2) · ml810/3000/3100 series switch (2)
- Communications9 CVE6 vendorsCVSS 5.3open-xchange appsuite (2) · pommo-ardvark (2) · sympa (1)
- Hardware Firmware8 CVE3 crit7 vendorsCVSS 10.0t2-b-gawv1.4u10y-bi (2) · air 6372 (1) · eudora worldmail (1)
- DevTools & CI8 CVE1 crit6 vendorsCVSS 7.3codiad (2) · teamcity (2)
- Unclassified51 CVE1 crit33 vendorsCVSS 5.5vdg sense (7) · arcticdesk (3) · ganesha digital library (3)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 3 | 135 | 40 | 21 | 25 | 72 | 7.3 | opensuse (46) · ubuntu linux (35) · debian linux (31) |
| Databases▸ 2 | 128 | 24 | · | 5 | 34 | 5.4 | fusion middleware (20) · jdk (18) · jre (18) |
| Web & CMS Plugins▸ 5 | 117 | 2 | · | 72 | 76 | 7.5 | mediawiki (9) · ferretcms (4) · adaptcms (3) |
| Mobile Apps▸ 2 | 85 | 26 | · | 5 | 10 | 9.0 | mac os x (41) · iphone os (20) · tvos (16) |
| Enterprise Software▸ 7 | 61 | 6 | · | 22 | 57 | 7.2 | mantisbt (7) · tririga application platform (3) · business process manager (2) |
| OSS Libraries▸ 7 | 60 | 2 | · | 25 | 33 | 6.5 | openssl (7) · php (7) · international components for unicode (6) |
| Consumer Software▸ 4 | 54 | 43 | 4 | 18 | 35 | 8.5 | flash player (19) · adobe air (9) · adobe air sdk (9) |
| Networking Infrastructure▸ 5 | 47 | 1 | 2 | 13 | 31 | 6.0 | webex meetings server (7) · junos (5) · dap-1360 firmware (4) |
| Security Products▸ 4 | 26 | 1 | · | 8 | 10 | 7.5 | documentum wdk (5) · vipr srm (4) · watch4net (4) |
| Cloud & SaaS▸ 4 | 23 | 1 | · | 9 | 15 | 5.6 | symantec critical system protection (5) · player (3) · workstation (3) |
| ICS / OT / IoT▸ 2 | 11 | 34 | · | 11 | 38 | 8.0 | etg3000 factorycast hmi gateway (2) · etg3000 factorycast hmi gateway firmware (2) · ml810/3000/3100 series switch (2) |
| Communications▸ 2 | 9 | · | · | 6 | 6 | 5.3 | open-xchange appsuite (2) · pommo-ardvark (2) · sympa (1) |
| Hardware Firmware▸ 3 | 8 | 3 | · | 7 | 8 | 10.0 | t2-b-gawv1.4u10y-bi (2) · air 6372 (1) · eudora worldmail (1) |
| DevTools & CI▸ 2 | 8 | 1 | · | 6 | 6 | 7.3 | codiad (2) · teamcity (2) |
| Unclassified | 51 | 1 | · | 33 | 35 | 5.5 | vdg sense (7) · arcticdesk (3) · ganesha digital library (3) |
Weakness × Sector
Which weaknesses hit which solution categories in January 2015
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
79XSS119Memory Buffer Bounds89SQL Injection264CWE-264352CSRF200Information Exposure20Improper Input Validation22Path Traversal399CWE-39917CWE-17Operating Systems72112088295Web & CMS Plugins61133226424Enterprise Software215441252OSS Libraries912234664Consumer Software2226223225Networking Infrastructure112266862Databases1121Security Products51121732Cloud & SaaS5142222Communications53112